soulseek: peer menu with browse and favorites

slskd has no favorites or buddy-list concept — 0.26.0's UsersController exposes
only endpoint/browse/directory/info/status — so Officer owns that data itself:
a soulseek_favorites table served by the slskd sidecar under a /_officer/*
namespace, which can never collide with slskd's /api/v0/*. The main server
gains exactly one line, injecting X-Officer-User on the proxy hop, so it stays
a thin auth proxy and grows no Soulseek logic. The route is handled before the
upstream check, so favorites keep working with slskd down.

Usernames in search results and downloads become a dropdown (browse shares,
toggle favorite). Browsing publishes to a nonce-stamped, consumed-once channel
so the Users section looks the peer up without re-running the expensive browse
on every remount, and favorites get their own section at the top of that panel,
which doubles as its landing content. CardHeader had to split its toggle row to
host the dropdown, since a trigger can't live inside the collapse button.

The schema file is deliberately self-contained so it can move wholesale into
the sidecar directory when sidecars start owning their own schema. Its DDL was
applied by hand, matching drizzle's constraint naming, rather than running a
whole-schema push.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/databases/officer_db/src/index.ts

@@ -102,6 +102,7 @@ export type {
   PlaylistSummary,
   Playlist,
 } from './queries/music';
+export { getSoulseekFavorites, addSoulseekFavorite, removeSoulseekFavorite } from './queries/soulseek';
 export {
   getVaultTokens,
   setVaultTokens,

src/databases/officer_db/src/queries/soulseek.ts

@@ -0,0 +1,25 @@
+import { eq, and, asc } from 'drizzle-orm';
+import { db } from '../db';
+import { soulseekFavorites } from '../schema';
+
+/** A user's favourited Soulseek peers, alphabetical (the order the UI lists them in). */
+export async function getSoulseekFavorites(userId: number): Promise<string[]> {
+  const rows = await db
+    .select({ username: soulseekFavorites.username })
+    .from(soulseekFavorites)
+    .where(eq(soulseekFavorites.userId, userId))
+    .orderBy(asc(soulseekFavorites.username));
+  return rows.map((r) => r.username);
+}
+
+/** Add a favourite (idempotent — a repeat add is a no-op via the unique constraint). */
+export async function addSoulseekFavorite(userId: number, username: string): Promise<void> {
+  await db.insert(soulseekFavorites).values({ userId, username }).onConflictDoNothing();
+}
+
+/** Remove a favourite (no-op if it wasn't set). */
+export async function removeSoulseekFavorite(userId: number, username: string): Promise<void> {
+  await db
+    .delete(soulseekFavorites)
+    .where(and(eq(soulseekFavorites.userId, userId), eq(soulseekFavorites.username, username)));
+}

src/databases/officer_db/src/schema/index.ts

@@ -7,4 +7,5 @@ export * from './email';
 export * from './pipeline-jobs';
 export * from './chat-events';
 export * from './music';
+export * from './soulseek';
 export * from './vault';

src/databases/officer_db/src/schema/soulseek.ts

@@ -0,0 +1,24 @@
+import { pgTable, serial, integer, text, timestamp, unique } from 'drizzle-orm/pg-core';
+import { users } from './auth';
+
+// Soulseek state that Officer owns because slskd has none. slskd exposes no favourites/buddy-list API
+// (verified against 0.26.0's UsersController: only endpoint/browse/directory/info/status), so the peers
+// the owner marks live here instead of in a forked daemon.
+//
+// Every table here is `soulseek_`-prefixed, and this file deliberately holds nothing else: when sidecars
+// start owning their own schema, it moves wholesale into src/servers/sidecar/slskd/ with no untangling.
+// Only the officer-slskd sidecar reads or writes these tables.
+
+export const soulseekFavorites = pgTable(
+  'soulseek_favorites',
+  {
+    id: serial('id').primaryKey(),
+    userId: integer('user_id')
+      .notNull()
+      .references(() => users.id, { onDelete: 'cascade' }),
+    username: text('username').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  // Also the lookup index — (user_id, username) covers "all of a user's favourites" by leftmost prefix.
+  (t) => [unique('uq_soulseek_favorites_user_username').on(t.userId, t.username)],
+);